Zuckerberg unscathed by congressional grilling

Facebook CEO Mark Zuckerberg admitted was among the 87 million people whose personal information was improperly shared.

Facebook CEO Mark Zuckerberg fielded 10 hours of questions over two days from nearly 100 US lawmakers and emerged largely unscathed and considerably richer.

ITWeb Security Summit 2018

Registration is open for ITWeb Security Summit 2018, which will feature cyber security guru Mikko Hypponen and other international infosec players as plenary speakers. Get involved in #SS18HACK and choose from two half-day workshops or a full-day Boot Camp plus five training courses. Click here for the agenda. For the first time, ITWeb Security Summit will also take place in Cape Town.

He parried questions of how much control people have over their data on the world's largest social media network without a major gaffe, while avoiding being cornered into supporting new government regulation.

The hearings that ended on Wednesday revealed no consensus among US lawmakers about what kind of privacy legislation they might want to pursue, if any, and no timeline for action. As he did on Tuesday before a Senate hearing, Zuckerberg refused during a House of Representatives committee hearing to make any promises to support new legislation or change how the social network does business.

"It is inevitable that there will need to be some regulation" of Internet firms, Zuckerberg said, but he avoided any specifics.

Although Zuckerberg, 33, had never testified at a congressional hearing before, he succeeded in deflecting questions like a Washington veteran. Forty times the Internet mogul told lawmakers he had no answers at hand and would get back to them later. About one in three lawmakers got that response over the two days.

Democratic representative Debbie Dingell expressed frustration with Zuckerberg's frequent promises to get back to lawmakers later in writing. "Some things are striking during this conversation," she said. "As CEO, you didn't know some key facts."

No control

On one point, Zuckerberg undercut his consistent message that Facebook users have control of their data. He said he was among the nearly 87 million people whose personal information was improperly shared with political consultancy Cambridge Analytica. He gave no further details.

His admission that even the company's tech-savvy founder was unable to protect his own data underscored the problem Facebook has in persuading skeptical lawmakers that users can easily safeguard their own information and that further legislation governing Facebook is unnecessary.

The Cambridge Analytica issue was the reason Zuckerberg was on Capitol Hill, answering questions about how that company, which has counted US president Donald Trump's election campaign among its clients, got hold of data about Facebook users.

"How can consumers have control over their data when Facebook does not have control over the data?" asked representative Frank Pallone of New Jersey, the ranking Democrat on the House Energy and Commerce Committee, at the beginning of Wednesday's hearing.

Zuckerberg said it would take "many months" to complete an audit of other apps that might also have improperly gathered or shared users' data.

"I do imagine that we will find some apps that were either doing something suspicious or misusing people's data," he said.

Inevitable regulation?

Zuckerberg was unable to answer Dingell, the Michigan congresswoman, when she asked how frequently Facebook used computer code embedded in Web sites to gather dossiers on virtually everyone online.

In a series of questions on how people can remove data from Facebook, Zuckerberg said the company does "collect data on people who are not signed up for Facebook, for security purposes". He had no response when asked how a non-Facebook member could remove information without signing up for the service.

He also said he was not familiar with what various media reports call "shadow profiles", collections of data assembled on Facebook users that they have no knowledge of or control over.

Wearing a dark suit and tie and politely prefacing almost every remark with "Congressman" or "Congresswoman", Zuckerberg appeared even more controlled than he did on Tuesday when he testified before senators. He refrained from cracking jokes and flashed few smiles.

The performance had favourable results. Facebook shares closed up 0.78% on Wednesday after rising 4.5% on Tuesday. Over the two days, the value of Zuckerberg's stake in the company grew about $3 billion.

Chairman of the House Energy and Commerce Committee, Greg Walden, told reporters he would talk with committee members about holding similar hearings with other technology chief executives. He did not name specific companies.

"This is a wake-up call to Silicon Valley and the tech community that if you let these things get out of hand, having grown up in a very lightly regulated environment, you could end up with a lot more regulation than you seek," he said after the hearing.

Many Democrats disagreed, saying their Republican colleagues held no genuine interest in having a meaningful debate that could lead to a regulatory overhaul of how technology firms handle data.

What remained as the dust settled on Wednesday was an inability to translate bipartisan concern into regulation due to the complexity of regulating technology issues and the powerful lobbying forces assembled against any effort to do so.

"If you think it is hard to pass a Bill that affects a lobbyist's favourite client," said Alvaro Bedoya, a former congressional aide who worked on privacy issues for former Senator Al Franken, "try passing a Bill that affects all of them".